--- apiVersion: v1 items: - apiVersion: v1 data: cnibincopy.sh: |- #!/bin/bash set -e function log() { echo "$(date --iso-8601=seconds) [cnibincopy] ${1}" } DESTINATION_DIRECTORY=/host/opt/cni/bin/ # Perform validation of usage if [ -z "$RHEL8_SOURCE_DIRECTORY" ] || [ -z "$RHEL9_SOURCE_DIRECTORY" ] || [ -z "$DEFAULT_SOURCE_DIRECTORY" ]; then log "FATAL ERROR: You must set env variables: RHEL8_SOURCE_DIRECTORY, RHEL9_SOURCE_DIRECTORY, DEFAULT_SOURCE_DIRECTORY" exit 1 fi if [ ! -d "$DESTINATION_DIRECTORY" ]; then log "FATAL ERROR: Destination directory ($DESTINATION_DIRECTORY) does not exist" exit 1 fi # Collect host OS information . /host/etc/os-release rhelmajor= # detect which version we're using in order to copy the proper binaries case "${ID}" in rhcos|scos) RHEL_VERSION=$(echo "${CPE_NAME}" | cut -f 5 -d :) rhelmajor=$(echo $RHEL_VERSION | sed -E 's/([0-9]+)\.{1}[0-9]+(\.[0-9]+)?/\1/') ;; rhel|centos) rhelmajor=$(echo "${VERSION_ID}" | cut -f 1 -d .) ;; fedora) if [ "${VARIANT_ID}" == "coreos" ]; then rhelmajor=8 else log "FATAL ERROR: Unsupported Fedora variant=${VARIANT_ID}" exit 1 fi ;; *) log "FATAL ERROR: Unsupported OS ID=${ID}"; exit 1 ;; esac # Set which directory we'll copy from, detect if it exists sourcedir= founddir=false case "${rhelmajor}" in 8) if [ -d "${RHEL8_SOURCE_DIRECTORY}" ]; then sourcedir=${RHEL8_SOURCE_DIRECTORY} founddir=true fi ;; 9) if [ -d "${RHEL9_SOURCE_DIRECTORY}" ]; then sourcedir=${RHEL9_SOURCE_DIRECTORY} founddir=true fi ;; *) log "ERROR: RHEL Major Version Unsupported, rhelmajor=${rhelmajor}" ;; esac # When it doesn't exist, fall back to the original directory. if [ "$founddir" == false ]; then log "Source directory unavailable for OS version: ${rhelmajor}" sourcedir=$DEFAULT_SOURCE_DIRECTORY fi # Use a subdirectory called "upgrade" so we can atomically move fully copied files. # We now use --remove-destination after running into an issue with -f not working over symlinks UPGRADE_DIRECTORY=${DESTINATION_DIRECTORY}upgrade_$(uuidgen) rm -Rf $UPGRADE_DIRECTORY mkdir -p $UPGRADE_DIRECTORY cp -r --remove-destination ${sourcedir}* $UPGRADE_DIRECTORY if [ $? -eq 0 ]; then log "Successfully copied files in ${sourcedir} to $UPGRADE_DIRECTORY" else log "Failed to copy files in ${sourcedir} to $UPGRADE_DIRECTORY" rm -Rf $UPGRADE_DIRECTORY exit 1 fi mv -f $UPGRADE_DIRECTORY/* ${DESTINATION_DIRECTORY}/ if [ $? -eq 0 ]; then log "Successfully moved files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" else log "Failed to move files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" rm -Rf $UPGRADE_DIRECTORY exit 1 fi rm -Rf $UPGRADE_DIRECTORY kind: ConfigMap metadata: annotations: kubernetes.io/description: | This is a script used to copy CNI binaries based on host OS release.openshift.io/version: 4.18.35 creationTimestamp: "2026-03-18T13:05:58Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:cnibincopy.sh: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"f11eff2e-4873-489e-8c90-90d74ea87da7"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-03-18T13:05:58Z" name: cni-copy-resources namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: f11eff2e-4873-489e-8c90-90d74ea87da7 resourceVersion: "2917" uid: f6a618ea-0d6b-4972-a090-5cd8fe93c414 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.18.35 creationTimestamp: "2026-03-18T13:05:58Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:allowlist.conf: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} f:release.openshift.io/version: {} manager: network-operator operation: Update time: "2026-03-18T13:05:58Z" name: cni-sysctl-allowlist namespace: openshift-multus resourceVersion: "2913" uid: 1c83b402-803e-41ee-976b-280d5cce9d45 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.18.35 creationTimestamp: "2026-03-18T13:05:58Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:allowlist.conf: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"f11eff2e-4873-489e-8c90-90d74ea87da7"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-03-18T13:05:58Z" name: default-cni-sysctl-allowlist namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: f11eff2e-4873-489e-8c90-90d74ea87da7 resourceVersion: "2912" uid: 17c710e3-ad12-4459-830c-136318072e1d - apiVersion: v1 data: ca.crt: | -----BEGIN CERTIFICATE----- MIIDMjCCAhqgAwIBAgIId7yDPD3M7S0wDQYJKoZIhvcNAQELBQAwNzESMBAGA1UE CxMJb3BlbnNoaWZ0MSEwHwYDVQQDExhrdWJlLWFwaXNlcnZlci1sYi1zaWduZXIw HhcNMjYwMzE4MTI1MDA2WhcNMzYwMzE1MTI1MDA2WjA3MRIwEAYDVQQLEwlvcGVu c2hpZnQxITAfBgNVBAMTGGt1YmUtYXBpc2VydmVyLWxiLXNpZ25lcjCCASIwDQYJ KoZIhvcNAQEBBQADggEPADCCAQoCggEBAKtHcoEQvxDgZylv4M6FBBpWN/TB1qFD FtBtGMF/kG5iYc9IJZ+UC4KKSKBeaIVLi3c/2IHqLupnLcZYSqOuv9iR1yx45MgV EpKjMCq4FYsDDkUQDr3/lhDsseZhxvkoYjcseyYEgpcaMWvwDLwV2q/XjyMWOA7f EMGgq3XO0GMVAZy10oD1ni/CEsXJtYxQPYJzXpOcwHW02SBUh9w4IdnrncAgcfT7 5XKi5BAjG36xfCmpINEK8AmceBWfMV+fjGZmntmVXgLRJ+9y7kXkIhx1ihejS3av rSIRNxQTRVccsC1q3wHzNBekDo3YLYtRxu4xZAJ5NvdZRNXlQktqSVUCAwEAAaNC MEAwDgYDVR0PAQH/BAQDAgKkMA8GA1UdEwEB/wQFMAMBAf8wHQYDVR0OBBYEFGEm w5TNYMfhEjolLN6pictVT/BKMA0GCSqGSIb3DQEBCwUAA4IBAQCK3xgMEA/Pc0Gy SWyF0AkLkYTiZ0k1iz4zX6q0dkTGL6FWIoYoB2JNAPYPmKDA15IEUtXBgfMPncZc NacmVgLaE3EXpEYhuVKQyt44sYZjvAI+iwIQ2lzWTPvFageUa3nnmLYFlSjwe1na 2PgfwIOtXoE0mOJPm3E+YxZiujlz71tZD8v5bGiJvmXMdnzGy3IeV7iHSsNDsUIm Pl+uhwOcUyNnNpaPC+a+RfGw5T9RNiKGVlgooBWHftZYcnOu/t+E64PH6sUJNmsQ HvjWD2/5FHxhh/Mt+bPh5smbJ2Jh9ai3uu99YiE9ml9KC6/SwObTtiP2nZv7D4/F KaIXx2/W -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIDQDCCAiigAwIBAgIIdszPWdXWDXwwDQYJKoZIhvcNAQELBQAwPjESMBAGA1UE CxMJb3BlbnNoaWZ0MSgwJgYDVQQDEx9rdWJlLWFwaXNlcnZlci1sb2NhbGhvc3Qt c2lnbmVyMB4XDTI2MDMxODEyNTAwNloXDTM2MDMxNTEyNTAwNlowPjESMBAGA1UE CxMJb3BlbnNoaWZ0MSgwJgYDVQQDEx9rdWJlLWFwaXNlcnZlci1sb2NhbGhvc3Qt c2lnbmVyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAniiUDjJ5BdRN El5qw+0+NoVT0d+yWhfq9UTuONy1BJ7ipgCgpZXpACeadE9hNWhiVluva4/SnF1a u48SBWI8LSsjMxdeGk0ZjA/vgjldc4I1pCekVTdgI4bgk5XfX9JqplVN4/PntwB0 YBHeiZulgh6aOAyIufsOHLK52+ZvE1cWZ/KWfZXN1LY4EBe7C+CAtMFnrbAZ/S/w MKOy3vrTbIXOsWS+6O0BXtul52OHrX4x7wdaAKQuQWV4qYNHSDMVQxN3+87TAdhp CIlFkI7lVCFrtczQy0zMC7r/dlllyY1pcBg33aUUMYR0GzT/1oAEgZmXBkIUE1AZ vOp83vH3gwIDAQABo0IwQDAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/BAUwAwEB /zAdBgNVHQ4EFgQUdjOUbDMoA7Gsl3JvcZV2vZQiTYEwDQYJKoZIhvcNAQELBQAD ggEBAIaxprXHXlA05C6b1Pd/J0itLmAwxtuIh1qjcay87iYQCYl2IalejI85AMBi 0jm40kyOGqAa9xlO5tl3CQp0bnoguErK7F7olZaR8wA75PDWuu/DnUKW+/QS/glT 2An6kfaDvOjf6h7017zqT9nyeZKtXhrTeygtloHJcHmcTe/1niUlbyOyULs5HGUH wynjbn9lkw2tE0QM1M9361paDi6+//ud11BIQy3h8BNQur0I6Vzsh2/ZcaOe/fp7 gU5KEzmpLOLHQvK2gNsLEigp9A1fLKViNCdCSUlWfuah0uXFW08qJEcYCNHkuffB Y0zEq7kgWLJ5qSDsX53JHpKcLho= -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIDTDCCAjSgAwIBAgIITavEua+EhWcwDQYJKoZIhvcNAQELBQAwRDESMBAGA1UE CxMJb3BlbnNoaWZ0MS4wLAYDVQQDEyVrdWJlLWFwaXNlcnZlci1zZXJ2aWNlLW5l dHdvcmstc2lnbmVyMB4XDTI2MDMxODEyNTAwNloXDTM2MDMxNTEyNTAwNlowRDES MBAGA1UECxMJb3BlbnNoaWZ0MS4wLAYDVQQDEyVrdWJlLWFwaXNlcnZlci1zZXJ2 aWNlLW5ldHdvcmstc2lnbmVyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlhxZLjE6Fequ1Pn/YL4lwBVwolq8itnrmbgcgp8hK8xpMYGzhrDDlU8iFNte JorSQM6g8QW1PjbLODmUW0neVjx16BD8FAYoXDrem3Oox+OmOvaix+avC9x4ZjQX jQZ+8m42C3MSt0lO/rK15N0aWK/IPgFlqjnwoQq673n1qLG3ddU0V9FthBSmYRPp eSIdgbvehMo3WZ/LINCEIuPyh871fg7lDA9RydwEPbv9AH1vwtMbgeUSPeiAxjAy 186gUbWAXVQCzRlhJqVTwHuDl17vblum2BAyrygih6UInGudKhp2d5kE0fsDGtzs Md+HoS4KxgidNPxXsferHMV78wIDAQABo0IwQDAOBgNVHQ8BAf8EBAMCAqQwDwYD VR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQU84yLoKv1ZAEAEZsyl+a6bBffZCgwDQYJ KoZIhvcNAQELBQADggEBAC6xHxbxvt7d4BHBclkPgZllhQvAvpQyyUCpgEKHAsIW ElC99dG1GA36IMqsDjmWDhz0wRdcaOEuqeFGu+Y6ZdI9LvJ2MZ5qyREtQNuGXSbI GFfrqyh2lJSTwsca75NzHr2dvt50Gp8RLb95jWoJVOajhNVHmGmlZXPSTD4zIqdZ AetFkaq9TCQggz66SZ5UJJotgGuxlBerwNT4wgfsxNRxIIDjEsFTrDooPzilgg7M xQuDRy9v1tsvtQHhuFrtTs9sBKNgVDQARviDug4FwyZF0TZOGr+5lVZ/v08Sc8B6 OcRd30zY/y9Suv7v9Wi9MuSDhUAf4an9uBPs0YSeQcA= -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIDlzCCAn+gAwIBAgIIJPlkn3mw2VowDQYJKoZIhvcNAQELBQAwWTFXMFUGA1UE AwxOb3BlbnNoaWZ0LWt1YmUtYXBpc2VydmVyLW9wZXJhdG9yX2xvY2FsaG9zdC1y ZWNvdmVyeS1zZXJ2aW5nLXNpZ25lckAxNzczODM5MjE0MB4XDTI2MDMxODEzMDY1 NFoXDTM2MDMxNTEzMDY1NVowWTFXMFUGA1UEAwxOb3BlbnNoaWZ0LWt1YmUtYXBp c2VydmVyLW9wZXJhdG9yX2xvY2FsaG9zdC1yZWNvdmVyeS1zZXJ2aW5nLXNpZ25l ckAxNzczODM5MjE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA98wk 9zrKj5Z3F1zHWPdWkPBuVzhpJG775aSpKwx9Lx6VJ/gih30YoiZBGYqxIFCtr5P/ fjD8bnhsB/hg4ftFo7PYExBun98KT96zB9JyKmSifMh/qZdNDcaLsgvivG+ZnA3v kDfDxRvkil2N5Nwyo+E0LoCvvgHFT2SVrSA9lGWPh9HF9n0knskqpAjh8G/hi1o9 UMJj6S5wezb1sT79OSxcQMHnXmwzyrUeKjNPnD2EnRXYDuABTbEjHjvV8RLfFJ19 CIn/tk0jZ18jh6yMZi347UoS+XzDf+ck5O+vBivRQnTmWi6HrOsbUrPIZekzZw/z gfJqVKzbDiLjKJxx7wIDAQABo2MwYTAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/ BAUwAwEB/zAdBgNVHQ4EFgQUcPOWP2R/DQWrIDCa36MQ+OMBUfwwHwYDVR0jBBgw FoAUcPOWP2R/DQWrIDCa36MQ+OMBUfwwDQYJKoZIhvcNAQELBQADggEBAApJmLyT 0DprYOypKFW84KKwOX7r9jb7KOyc4J0ZrZdl6DGVlaDduyBaXENZyNrk8uzRQ9aG 4oPmeF/15IP63Q2U00UeqySwyiuqrH1rht1eROogsmHHKj50CVZsBTrfn0Xb45gT MDJ1JELeeHqD3A16g1KcSf+DmarU2iKxsChLMVKjPoDPe2Ez7m1X6RJ6JN1Zktti P7BminCGQu8Umo9s9ThVN6KUNJZydc4hRqldEOoA8beP6WkkyUTnmJtt4ka83GWn Iz6KCMEq/iud7a5lcbCUB5vUGlOlJJ6LF0OTe9RqG+LSrZLs1a+ZpZqFPwu9HM5A izLRKT0VxAfb/1o= -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIDZzCCAk+gAwIBAgIIQn1q2ZhSXhkwDQYJKoZIhvcNAQELBQAwJjEkMCIGA1UE AwwbaW5ncmVzcy1vcGVyYXRvckAxNzczODM5MjU2MB4XDTI2MDMxODEzMDczN1oX DTI4MDMxNzEzMDczOFowIzEhMB8GA1UEAwwYKi5hcHBzLnNuby5vcGVuc3RhY2su bGFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/daSGRrFi+p2Msq bsyTb2Qnj8K2rHXBYaCTDQNm8zpvjjn9XgFR6m07wJ8lz9Dx5qjdVs0gr0S0KTRN Jikyz/bpksxNs64tLKSmDCrkcv4J8zqJgPnE/KCrY1Bdxn9k4g5ujnaKamEFUaqI IYGsIMXQoeZPoKrdY0+5FmSjrOm0MoCDYGFmsXaIjYElmdNyC5Y8hHVlHkIw51c1 bCkTFicCgt4FcnnzW823l9weyBDAoIQb1hNCm3ZUChdLy5BzsOWlKUD7sOuJh+nT DxxRi1J5CXQ7Px4oF18SAHVFLVRGV/WEMnfAxQfP6Wh6euskRO+BQehHnb7Qr3em fmLfAwIDAQABo4GbMIGYMA4GA1UdDwEB/wQEAwIFoDATBgNVHSUEDDAKBggrBgEF BQcDATAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBRRRLbdrAFN5qI9kIxsx7WwCpS9 XjAfBgNVHSMEGDAWgBRJqZkuoec7Q2E1tyadtlLDIRU/fzAjBgNVHREEHDAaghgq LmFwcHMuc25vLm9wZW5zdGFjay5sYWIwDQYJKoZIhvcNAQELBQADggEBAGYRWFOi V7zRjNOgoe7wo/176dPzaI9M1qqs7giWPuPjn1z38esILj2kBJ0evXSbrPH8Zqzu 5QTBi1SUaeHm/CcmaVbfG/+/CoNf++BAptrwsL9X3cp8yrql5x5ExmSjjVvebedj OajAH0UArdke2mJCAJpWJONnTPxofawtELPFoTwKJwObRi0560uOMJA6/V7wUze7 3docCpercvkDbCEX5uShny+MNJowHmrDYFuVJMJhTRL+Cj0yMxCqauOkl+NfbQuN 2BdA41rDX/sosm+fwTqeF5DsTXxoA6vy7UxCRc+m5UfMnRXpqEGgiPu/qCR/25WU Chlt+kuw8zetT28= -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIDDDCCAfSgAwIBAgIBATANBgkqhkiG9w0BAQsFADAmMSQwIgYDVQQDDBtpbmdy ZXNzLW9wZXJhdG9yQDE3NzM4MzkyNTYwHhcNMjYwMzE4MTMwNzM2WhcNMjgwMzE3 MTMwNzM3WjAmMSQwIgYDVQQDDBtpbmdyZXNzLW9wZXJhdG9yQDE3NzM4MzkyNTYw ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChJ0dKdNYMVtR4fdNLlC1q xU2XDSK760FwAD42KpllhnBUXWgGK7kNDD6NeB0zllBwJtkvtDOx2LHLxc/DxYRm uiZye1a4mTI4xgnRZzHqdcRJ1CHHldfX0Aibe5eVKw+1KyCrYRJkWny/ReszpPi3 7fMKkvFVMCs1bm7AhRbvky0b8Z32Bbu8SEHwPWUu60KBDJX1oH5ZhT3xwXFe1DPe UhwYKNA1L7cRw8tDKqSGFzI8YYza9N5g+ylzAzbeOVcc7SJGSNUaobyvXMcYT6mw aKnSKmwlokQSUnjCOI/pSpFXJR69wmLDt2d1feffl7eRRKqiSxtgSoNGrsZ9FjuR AgMBAAGjRTBDMA4GA1UdDwEB/wQEAwICpDASBgNVHRMBAf8ECDAGAQH/AgEAMB0G A1UdDgQWBBRJqZkuoec7Q2E1tyadtlLDIRU/fzANBgkqhkiG9w0BAQsFAAOCAQEA VH0ABW778dRGdbnX4zeG9cqcs3JZrBbbcYNoBX92qfWA0AxOoQAFCWEBPAcn3l6i cxavxaUkhsjspamE489RJ0UC0a9Ct2/Kbp146MMqrSj9MrTrrc6t+IwIVEopG/FL RNklpGGM5CrEdGKHWJdZtjNw7LF3XTB1+YyEiWRqJVWVaGutxZMio/XVANNP6J1d 9mgt808wqM1FE3P05+FFmPCg6Ory2GFhusaD7/6yEQg6Re5cGTeuIieRsI705mDH BNS2z/Ix58OQWlyRANGarOgrCEA1a2TG1x21eMDDotPqN7+hf8UlQWh2BiOHuNXz Ls0Jgy/8bN3PQFYcx/T1gA== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: kubernetes.io/description: Contains a CA bundle that can be used to verify the kube-apiserver when using internal endpoints such as the internal service IP or kubernetes.default.svc. No other usage is guaranteed across distributions of Kubernetes clusters. creationTimestamp: "2026-03-18T13:05:56Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:ca.crt: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} manager: kube-controller-manager operation: Update time: "2026-03-18T13:12:13Z" name: kube-root-ca.crt namespace: openshift-multus resourceVersion: "10953" uid: 556f9f94-eedc-4cb6-9f58-9e900e0be075 - apiVersion: v1 data: daemon-config.json: | { "cniVersion": "0.3.1", "chrootDir": "/hostroot", "logToStderr": true, "logLevel": "verbose", "binDir": "/var/lib/cni/bin", "perNodeCertificate": { "enabled": true, "bootstrapKubeconfig": "/var/lib/kubelet/kubeconfig", "certDir": "/etc/cni/multus/certs", "certDuration": "24h" }, "cniConfigDir": "/host/etc/cni/net.d", "multusConfigFile": "auto", "multusAutoconfigDir": "/host/run/multus/cni/net.d", "namespaceIsolation": true, "globalNamespaces": "default,openshift-multus,openshift-sriov-network-operator,openshift-cnv", "readinessindicatorfile": "/host/run/multus/cni/net.d/10-ovn-kubernetes.conf", "daemonSocketDir": "/run/multus/socket", "socketDir": "/host/run/multus/socket", "auxiliaryCNIChainName": "vendor-cni-chain" } kind: ConfigMap metadata: creationTimestamp: "2026-03-18T13:05:58Z" labels: app: multus tier: node managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:daemon-config.json: {} f:metadata: f:labels: f:app: {} f:tier: {} f:ownerReferences: k:{"uid":"f11eff2e-4873-489e-8c90-90d74ea87da7"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-03-18T13:05:58Z" name: multus-daemon-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: f11eff2e-4873-489e-8c90-90d74ea87da7 resourceVersion: "2919" uid: 882f0467-4da3-48b7-9fb0-96e4cfb8c697 - apiVersion: v1 data: service-ca.crt: | -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIDupE9jBRN1MwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc3MzgzOTIyOTAe Fw0yNjAzMTgxMzA3MDhaFw0yODA1MTYxMzA3MDlaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3NzM4MzkyMjkwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYXaiwGUei1u+HIGjjPJA6zqZoTcmXgeMd xtiIi8u5ygqimp5bd9/Bs21Ddhnuruzho/occkb7mClxvLJuG2OujhZW6eGDoqjd MJktN6tKjCX45rCrNNXg8oiyDT+0uBbGF+qsHV8/MlfwCUF42QmxIbTeyMH8N/II iv/bSKcstWMkHAYIheYZ31E/ck7+hbGkFPPmxSUzpKkkWrfmpJ2fktm1wXIFp0sC sbYTOrix8ORvGotAxLZHzLg0YOBBzIFb93TJkrvf6Lh4Yullz/DvrNUjb25Wvxi8 DepoIaAl0ihhRMqKgDJ3lE7Tx8BIJk3i2xyLykrK9KqVB8L73HVPAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS4aW6Y 0IyxckV2MLzfOda6YNL+rDAfBgNVHSMEGDAWgBS4aW6Y0IyxckV2MLzfOda6YNL+ rDANBgkqhkiG9w0BAQsFAAOCAQEAvF4FxXaaPxuh6/RWOWFbcnq6nW0UT7CrnVU9 Kc3Ng2/ejlQXj7oDJXAeYkVF3h19oFy94zD6mXccwAj+B4VA1wnXPk2ZJwExA9n1 FPLh4KwuhYkufT3JFDEDCpkGorOQNcBA0+UL3sS79PYNfF3UfnXvlyHZJtsSB6Uq /tUFli1AcdKMS4F/0uycuUW6bcq/oLVdncxGiDnV9uG3FPSyO5nORfv6s3OLAeFB jFgj/0ZoxWigHY7Crv7+G4e5rvT3rfA/6HYjQ3/TcXld1l5AYPVqWOirYnB1hyM/ 1HoBGv/XJxYZtZ/pyBJUBVwFjqx0DB22ieJv+HrnKwnUlFP6rg== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: service.beta.openshift.io/inject-cabundle: "true" creationTimestamp: "2026-03-18T13:05:56Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: {} f:metadata: f:annotations: .: {} f:service.beta.openshift.io/inject-cabundle: {} manager: kube-controller-manager operation: Update time: "2026-03-18T13:05:56Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:service-ca.crt: {} manager: service-ca-operator operation: Update time: "2026-03-18T13:07:21Z" name: openshift-service-ca.crt namespace: openshift-multus resourceVersion: "5773" uid: acc62f51-1b01-4e43-87bc-e6947004b029 - apiVersion: v1 data: whereabouts.conf: | { "datastore": "kubernetes", "kubernetes": { "kubeconfig": "/etc/kubernetes/cni/net.d/whereabouts.d/whereabouts.kubeconfig" }, "reconciler_cron_expression": "30 4 * * *", "log_level": "verbose", "configuration_path": "/etc/kubernetes/cni/net.d/whereabouts.d" } kind: ConfigMap metadata: creationTimestamp: "2026-03-18T13:05:58Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:whereabouts.conf: {} f:metadata: f:ownerReferences: k:{"uid":"f11eff2e-4873-489e-8c90-90d74ea87da7"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-03-18T13:05:58Z" name: whereabouts-flatfile-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: f11eff2e-4873-489e-8c90-90d74ea87da7 resourceVersion: "2918" uid: c300fabc-fb2d-4556-ba29-835b73c8df6d kind: ConfigMapList metadata: resourceVersion: "40697"